From owner-freebsd-ports@FreeBSD.ORG  Fri Nov 23 08:26:40 2012
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id 5B0AAABB
 for <freebsd-ports@freebsd.org>; Fri, 23 Nov 2012 08:26:40 +0000 (UTC)
 (envelope-from mazhe@alkumuna.eu)
Received: from smtp1-g21.free.fr (smtp1-g21.free.fr [IPv6:2a01:e0c:1:1599::10])
 by mx1.freebsd.org (Postfix) with ESMTP id AE02E8FC12
 for <freebsd-ports@freebsd.org>; Fri, 23 Nov 2012 08:26:37 +0000 (UTC)
Received: from yggdrasil.alkumuna.eu (unknown
 [IPv6:2a01:e35:8a74:6e70:232:36ff:fe5c:3a87])
 by smtp1-g21.free.fr (Postfix) with ESMTP id 48D5494009B
 for <freebsd-ports@freebsd.org>; Fri, 23 Nov 2012 09:26:33 +0100 (CET)
Received: from freedom.alkumuna.eu ([192.168.10.100]) (authenticated bits=0)
 by yggdrasil.alkumuna.eu (8.14.5/8.14.5) with ESMTP id qAN8QVIt018220
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
 for <freebsd-ports@freebsd.org>; Fri, 23 Nov 2012 09:26:31 +0100 (CET)
 (envelope-from mazhe@alkumuna.eu)
Date: Fri, 23 Nov 2012 09:26:31 +0100
From: Matthieu Volat <mazhe@alkumuna.eu>
To: freebsd-ports@freebsd.org
Subject: Opera vulnerability, marked forbidden instead of update?
Message-Id: <20121123092631.3b0aff2f0902e02098c273b4@alkumuna.eu>
X-Mailer: Sylpheed 3.3.0 (GTK+ 2.24.10; amd64-portbld-freebsd9.0)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Nov 2012 08:26:40 -0000

Hello,

I've noticed that www/opera was marked FORBIDDEN because of a security hole:
http://www.freebsd.org/cgi/getmsg.cgi?fetch=614275+0+current/svn-ports-head

The opera software compagny advisory indeed mark this bug as high severity, and mention that there is an update to fix it.

I am not familiar with the security process in ports, but would not it be better to update the version? Marking it FORBIDDEN do not do much for the userbase that does already have it installed.

I've bumped the versions in the Makefile
OPERA_VER?=     12.11
OPERA_BUILD?=   1661
and made a `make makesum reinstall`, there was no apparent problem.

Regards,

-- 
Matthieu Volat <mazhe@alkumuna.eu>